![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.mft
File: mogMjbFaBDs74WXi2DG6oEerAKw.mft (raw, json)
Hash identifier: J0uAPueveSekydbpVO/9MND6juIAn36Y14FScVYpK4s=
Subject key identifier: 61:64:8D:B9:94:DC:56:55:B0:84:FE:69:A8:91:4A:68:A3:8D:C6:35
Authority key identifier: 9A:88:0C:8D:B1:5A:04:3B:3B:E1:65:E2:D8:31:BA:A0:47:AB:00:AC
Certificate issuer: /CN=9a880c8db15a043b3be165e2d831baa047ab00ac
Certificate serial: 0195113541EAFCCBC222332D005579152B84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mogMjbFaBDs74WXi2DG6oEerAKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.mft
Manifest number: 0733
Signing time: Mon 17 Feb 2025 00:00:57 +0000
Manifest this update: Mon 17 Feb 2025 00:00:57 +0000
Manifest next update: Tue 18 Feb 2025 00:00:57 +0000
Files and hashes: 1: mogMjbFaBDs74WXi2DG6oEerAKw.crl (hash: WTQCvGGbTq5oJGdPmlcA9Hon6ckyaOEAUmXuyFi21+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mogMjbFaBDs74WXi2DG6oEerAKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:41:ea:fc:cb:c2:22:33:2d:00:55:79:15:2b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a880c8db15a043b3be165e2d831baa047ab00ac
Validity
Not Before: Feb 17 00:00:57 2025 GMT
Not After : Feb 18 00:00:57 2025 GMT
Subject: CN=61648db994dc5655b084fe69a8914a68a38dc635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1e:e8:82:25:3e:38:17:f6:b0:54:f7:a2:7b:
ac:74:3d:b6:ab:99:bd:9b:f3:37:82:ea:4b:38:23:
20:a8:fe:81:2c:47:d1:54:1d:e0:3a:56:e5:24:17:
5b:4a:a5:b6:4c:6e:eb:27:26:9a:81:7e:25:a1:ba:
11:40:fa:52:4c:db:ea:46:bf:ce:eb:fd:6a:83:39:
5c:89:00:b2:7c:c8:16:ff:c8:1a:34:59:b5:2b:73:
9d:50:a3:39:e7:69:19:7e:e1:0d:4a:80:1b:65:38:
89:cd:2e:20:8e:9b:66:fb:d4:41:bc:cd:15:85:bd:
f7:56:12:42:32:5f:dd:26:f2:fa:bb:a3:fe:5b:43:
af:8b:bc:35:fe:28:07:db:d7:b6:6c:f3:3d:64:4d:
0c:46:81:59:14:e4:74:e3:00:70:ed:c6:07:ca:2d:
1f:f5:12:cd:ce:2d:95:01:cd:10:91:cb:ac:ca:c9:
0b:db:43:b2:c9:d5:ca:b3:db:2b:fa:8a:0b:68:c8:
f8:da:ff:fc:26:89:9e:5d:88:b2:38:a4:98:fb:79:
b3:31:60:12:dd:c4:4f:b5:a3:85:df:c5:6d:5c:f2:
c5:b7:69:46:53:be:2f:63:d4:b1:39:36:30:be:e7:
a6:f4:4a:cc:18:bf:fb:a5:42:ef:8c:47:fc:23:71:
2e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:64:8D:B9:94:DC:56:55:B0:84:FE:69:A8:91:4A:68:A3:8D:C6:35
X509v3 Authority Key Identifier:
keyid:9A:88:0C:8D:B1:5A:04:3B:3B:E1:65:E2:D8:31:BA:A0:47:AB:00:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mogMjbFaBDs74WXi2DG6oEerAKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:24:42:ca:f8:95:8d:0c:45:a7:10:d4:13:aa:a7:9a:d6:b1:
20:91:de:00:3d:b4:b8:b9:ab:49:91:b6:4a:42:92:6e:17:ab:
97:6a:83:b2:6f:ff:c8:02:15:91:68:e1:c2:2f:e3:fb:d7:ef:
00:40:b7:89:5e:38:1d:99:82:9b:8d:35:5e:be:3f:2d:0b:71:
12:f8:1c:92:2a:aa:da:1f:b5:05:b4:c3:a2:d3:46:a6:ae:6b:
33:e6:ed:42:a1:b7:44:94:66:1c:64:0b:d2:e8:f5:ad:8f:7f:
55:fd:e3:39:e3:f8:bf:87:ce:e6:53:79:c8:ee:c0:e4:62:3d:
22:ea:3f:68:6c:bd:65:14:53:06:d0:c8:7e:fe:26:85:86:eb:
ab:d2:b2:e1:e8:b6:a4:98:83:bf:70:88:22:80:ae:58:16:fa:
8e:cc:97:a6:7f:d0:22:89:40:5a:30:a8:aa:81:08:52:94:14:
f5:e7:af:e9:30:64:ca:13:60:b3:e0:67:24:ea:86:ef:46:2a:
ac:f2:5a:0e:9b:1c:b4:87:f2:ac:38:3e:43:9a:41:b7:d4:f2:
a1:fd:24:98:d6:53:2e:49:60:cd:fd:8d:30:46:b3:33:8a:49:
3a:6a:ad:a7:9d:e5:cf:c4:8c:0d:57:d3:29:d2:31:b2:0d:f9:
b7:47:3c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:37 2025 by rpki-client